At the moment i configured bind to be a slave and just get the zone from the ipa dns. but still i think thats not the best way to do it. since i will also have some hosts in the zonefile that shouldn't be public.
But I think that problem isn't related to ipa. I'm really happy about ipa right know and just playing around with it and hope that we could deploy it live, soon. Btw. are there any tips by having a second nameserver (public) that just gives out the important/public hosts? Or is there a good way in having a domain configured twice? like the internal ip for ipa-users and the external ip for the people outside of the internal firewall? P.S.: I'm not that much familiar with bind9/10. I'm just learning to use it correctly and make a good enviroment with ipa. 2013/7/5 Rob Crittenden <rcrit...@redhat.com> > Schmitt, Christian wrote: > >> is it possible to install ipa-dns-install on a remote host that is only >> connect via vpn? >> >> I mean this i my current network structure: >> >> Host (Internet) Intranet >> VPN Access Provider tun < - > tun FreeIPA Server dc01 >> dc02 >> >> when i now try to ipa-dns-install with the ip from the client ip of the >> tun device of the FreeIPA Server i always get an error that the ip is >> not on my device. Is there an easy way of having the DNS of the FreeIPA >> Server on an Internet Machine? I mean it will work if i replicate the >> whole ipa-server but that is somehow a little bit of an overkill. >> > > We provide no tool to configure DNS as a standalone service. The > ipa-dns-install tool will only configure a bind server running on an IPA > master. > > It is possible to configure bind/bind-dyndb-ldap to run on another host > but you'd likely have performance issues and there could be problems at > upgrade if we make configuration changes (they wouldn't be applied to your > manually-configured instance). > > rob >
_______________________________________________ Freeipa-users mailing list Freeipafirstname.lastname@example.org https://www.redhat.com/mailman/listinfo/freeipa-users